The act itself is certainly legal, but the methods involve: 1. Violating the terms of service of CL, FB, MS, Backpage, etc. 2. Cloaking IP addresses 3. Misleading customer with false information about the service. I haven't heard of serious consequences. Seems like only a matter of time 'till the govt. makes an example of a big fish, though.